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(54) Data storage device and control method therfor 



(57) It is provided a data storage device which reads 
data from and/or writes data to a. memory medium, 
comprising: an acquisition unit for acquiring manage- 
ment information which is recorded t>y a predetermined 
form in said memory; and a controller for converting the 
management information into an anotiier form. The con- 
troller rearranges the management information to con- 
vert tiie management information into cviother form, and 
also the controller restores the converted management 
information to the predetermined form according to a 
relationship between a first identifier recorded on the 
memory medium and a second identifier recorded in the 
data storage device. When, for exanple, the two kJentt- 
fiers match, the acquisition unit can acquire the man- 
agement information, and the reading and writing of 
data is enabled. When the two identifiers do not match, 
restoration of the management information to a prede- 
termined form is not effected, so that the acquisition unit 
can not acquire the management information and the 
reading and writing of data is disabled. 
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Description 

BACKGROUND OF THE INVENTION 
Reld of the Invention 

[0001 ] The present invention relates to a data storage 
device for recording data on a memory medium, such 
as a magneto-optical disk, and in particular to a data 
storage device which ensures the secrecy and the 
security of recorded data. 

Related Arts 

[0002] Generally, a data writable memory medium 
(hereinafter refened to as a medium), such as a mag- 
neto-optical disk (MO), can be inserted into or removed 
from a data storage device (hereinafter simply referred 
to as a storage device) which reads and writes predeter- 
mined data from and to the medium. When a medium is 
loaded into the storage device, operational control for 
the storage device is provided by commands issued by 
a superior apparatus, such as a personal computer con- 
nected to the storage device by a SCSI cable. 
[0003] Conventionally, by taking compatibility into 
account, reading data from arKi writing data to a 
medium can also be performed by a storage device 
other than the device which was originally employed for 
writing data. 

[0004] Fig. 19 is a flowchart for data reading/writing 
processing performed by a conventional storage device. 
After a medium is inserted into the storage device at 
step SI , at step S2 a process for loading the medium is 
started. That is, the medium is positioned at a predeter- 
mined location within the storage device and is rotated 
at a controlled revolution rate, and a process is per- 
formed to set the medium to a data reading enabled 
state or to a data writing enabled state. At step S3, 
medium information, such as configuration and memory 
capacity of the medium, are read, and at step S4 the 
reading and writing of data is enabled by the employ- 
ment of an operation or a processing procedure based 
on the information. 

[0005] Therefore, a problem has arisen in that once a 
memory medium has been acquired, secret data 
recorded on the memory medium, such as the contents 
of a client database or design data, can easily be stolen 
or altered. 

SUMMARY OF THE INVENTION 

[0006] It is. therefore, one objective of the present 
invention to provide a data storage device that ensures 
the secrecy and the security of data recorded on a 
memory medium. 

[0007] To achieve the above objective, according to 
the present invention, a data storage device which 
reads data from and/or writes data to a memory 



medium, comprises: 

an acquisition unit for acquiring management infor- 
mation which is recorded by a predetermined form 
5 in said memory. 

a controller for converting said management infor- 
mation into an another form. 

[0008] The corrtroller rearranges the management 

10 information to convert the management information into 
another form; the controller shifts the management 
information by at least one bit to convert the manage- 
ment information into another form; or the controller 
encodes the management information to convert the 

15 management information into another form. 

[0009] Further, the controller restores the converted 
management information to the predetermined form 
according to a relationship between a first identifier 
recorded on the memory medium and a second identi- 

20 fier recorded in the data storage device. 

[001 0] When, for exanple, the two identifiers match, 
the acquisition unit can acquire the management infor- 
mation, and the reading and writing of data is enabled. 
When the two identifiers do not match, restoration of the 

25 management information to a predetermined form is not 
effected, so that the acquisition unit can not acquire the 
management information and the reading and writing of 
data is disabled. 

[0011] To achieve the above objective, according to 
30 the another present invention, a data storage device 
which reads data from and/or writes data to a memory 
medium, comprises: 

an acquisition unit for acquiring management infor- 
ms mation which is recorded on a predetermined area 
of said memory medium. 

a controller for moving said management informa- 
tion to an another area. 

40 [0012] The acquisition unit acquires the moved man- 
agement information from the another area according to 
a relationship between a first identifier recorded on the 
memory medium and a second identifier recorded in the 
data storage device. 

45 [0013] For example. each the first and the second 
identifiers is a serial number for the data storage device 
arKi the predetermined area is a disk definition sector 
(DOS) area of the memory medium. 
[0014] When, for example, the two identifiers match, 

so the management information can be acquired from the 
another area, and the reading and writing of data is ena- 
bled. When the two identifiers do not match, and the 
acquisition unit does not acquire the management infor- 
mation because the acquisition unit tries to acquire the 

55 management information from the predetermined area 
where management information is not present, and the 
reading and the writing of data are disabled. 
[0015] On the memory medium is recorded read 
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address information or write address information, which 
is used to control data reading or writing respectively. 
When the first and the second identifiers match, the 
controller may permit or inhibit the reading of data in 
accordance with the read address information or may 5 
permit or inhibit the writing of data in accordance with 
the write address information. 

[001 6] Preferat>ly, provided for the memory medium is 
a first password. For exanrple. when the reading of data 
is inhibited in accordance with read address informa- 10 
tion. if the first password matches a secorid password 
sent from a controller of the data storage device, the 
controller permits the reading of data. 
[0017] The memory medium includes address infor- 
mation which designates at least one of a plurality of is 
data sets which are recorded on the memory medium. 
For example, the controller may permit or inhibit the 
reading of data con-esponding to the address informa- 
tion when both the first and the second identifiers 
match. 20 
[0018] Other features and advantages of the present 
invention will become readily apparent from the follow- 
ing description when taken in conjunction with the 
accompanying drawings, 

25 

BRIEF DESCRIPTION OF THE DRAWINGS 

[001 9] The accompanying drawings, which are incor- 
porated in and constitute a part of the specification, 
illustrate presently preferred embodiments of the inven- 30 
tion. and together with the general description given 
above and the detailed description of the preferred 
emkxxliments given below, serve to explain the principle 
of the invention, in which: 

35 

Fig. 1 is a block diagram illustrating a data storage 
device according to embodiments of the present 
invention; 

Fig. 2 is a diagram showing an example layout of a 
disk format for a magneto-optical disk; 40 
Fig. 3 is a specific diagram showing an example 
layout for a data area; 

Rg. 4 is a flowchart for the security execution 
processing performed according to the embodi- 
ments of the present invention; 45 
Fig. 5 is a flowchart for the security setup process- 
ing performed according to a first emkxxliment of 
the present invention; 

Rg. 6 is a flowchart for the security execution 
processing performed according to the first embod- so 
iment of the present invention; 
Rg. 7 is a diagram for explaining an example rear- 
rangement of DOS information; 
Rg. 8 is a flowchart for the security setup process- 
ing perfornied according to a second embodiment ss 
of the present invention; 

Rg. 9 is a flowchart for the security execution 
processing performed according to the second 



embodiment of the present invention; 
Rg. 1 0 is a flowchart for the security setup process- 
ing performed according to a third enrfoodiment of 
the present invention; 

Rg. 11 is a flowchart for the security execution 
processing performed according to the third 
emt>odiment of the present invention; 
Rg. 12 is a diagram for explaining an example shift 
of DOS information; 

Rg. 1 3 is a flowchart for the security setup process- 
ing performed according to a fourtii embodiment of 
the present invention; 

Rg. 14 is a flowchart for the security execution 
processing performed according to the fourth 
embodiment of the present invention; 
Rg. 1 5 is a diagram showing the structure of a CDB 
for a security setup command that employs a ven- 
dor unique command; 

Rg. 16 is a diagram showing tiie structure of a CQ^ 
for a format command the security level of which is 
designated; 

Rgs. 17A and 17B are diagrams depicting the 
structures of a parameter header and a level 
descriptor; 

Rgs. 18A and 1 SB are diagran^ in each of which is 
shown the structure of a parameter field for a level 
descriptor; and 

Rg. 19 is a flowchart showing the conventional 
processing performed when accessing a memory 
medium. 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

[0020] The prefen-ed emtxxJiments of the present 
invention will now be described while referring to the 
accompanying drawings. However, the technical scope 
of the present invention is not limited to these enrdxxli- 
ments. In the drawings, the same reference numerals or 
symbols are used to denote corresponding or identical 
components. 

[0021] in the emkxxliment of the present invention, a 
magneto-optical disk (MO) is OTiployed as the medium, 
kxjt the medium that can be employed is not thereby lim- 
ited, and another data writable memory medium, such 
as a CD-R. rnay be employed. 
[0022] Fig. '1 is a schematic block diagram illustrating 
a magneto-optical disk de/ice (data storage device) 
according to the present invention. In Rg. 1 , a magneto- 
optical disk device 1 is connected via a SCSI interface 
to a personatxonrrputer 2. which is a control apparatus. 
[0023] The magneto-optical disk device 1 comprises 
a mechanism.controller 10. for performing the writing of 
data to and the reading of data from a magneto-optical 
disK and a control unit which includes a magneto-opti- 
cal disk controller (ODC) which employs firmware to 
implement a method according to the present invention. 
[0024] The control unit further includes an MPU 12. 
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which controls the entire magneto-optical disk device 1 ; 
a D-RAM 13, which is a read/write buffer memory; a 
DSP 14. for performing positioning; a write data ampli- 
fier 14; a read data amplifier 16; an AGO amplifier 17; a 
head drive power arrplifier 1 8; and a disk rotation motor 
controller 19. 

[0025] The mechanism controller 1 0 includes a head 
sensor 100, a data reading/writing laser diode 101. and 
a detector 102 for detecting the inclination of a head. 
Further, the mechanism controller 10 includes a focus 
actuator 103, which is controlled by the head drive 
power amplifier. 18: a track actuator 104; a disk ejection 
motor 105; a head drive voice coil motor 106; and a 
spindle motor 107. which is controlled by the motor con- 
troller 19. for rotating a disk. 

[0026] When an operator enters a command (e.g., a 
read command or a write command) at a keyboard 3 of 
the personal computer 2. a SCSI command is transmit- 
ted by the computer 2 to the magneto-optical disk con- 
troller (ODC) 11 to start the writing/reading of data. 
Connected to the computer 2 is a display 4 on which 
data are displayed. 

[0027] The magneto-optical disk controller (ODC) 1 1 , 
which is provided with flash ROM for the storage of 
firmware, has an analysis function for analyzing SCSI 
commands received from the computer 2, and a coordi- 
nation function for interacting with the MPU 12, in 
response to a SCSI command, to provide data writ- 
ing/reading control for the mechanism controller 10. 
[0028] The present invention can be applied not only 
for a SCSI command system but also for another com- 
mand system, such as an ATA/ATAPI/SASI command 
system. 

[0029] Fig. 2 is a diagram showing an example layout 
of a disk format for a magneto-optical disk (MO), i.e.. the 
arrangement of areas on a 3.5-inch medium for a full 
RAM disk format conforming to ISO standards. As is 
shown in Fig. 2, in a range extending from a radius of 
23.72 mm from the center of the MO disk to a radius of 
41 .00 mm is a data area in which user data can be writ- 
ten. The inside and the outside areas in the radial direc- 
tion are medium information management areas in 
which are recorded various medium information, such 
as the type and the structure of a medium. 
[0030] Fig. 3 is a specific diagram illustrating an exam- 
ple layout for the above data areas. In Fig. 3, the data 
areas are a user area, in which a user can write data, 
and DDS (Disk Definition Sector) areas, two of each 
l^ing positioned on either side of the user area. In addi- 
tion, a replacement area is provided for the user area as 
a spare area. The DDS areas are used to record man- 
agement information of the medium (hereinafter 
referred to as DDS information), which is information for 
managing the usfer area, for example, information for a 
defect in the user area. 

[0031] When the storage device is to access the 
medium for the reading or the writing of data, first, the 
ODC 1 1 reads the DDS information, and theri, after the 



DDS information have been effectively acquired, 
accessing the user area is possit3le. Therefore, if the 
acquisition of DDS information fails for a specific rea- 
son, accessing the user area is not possit)ie. In other 
5 words, the reading and writing of data to the medium is 
disabled. 

[0032] In the preferred embodiments of the present 
invention, the acquisition of DDS information by the 
ODC 1 1 is disabled under a predetermined condition in 

10 order to inhibit access of the user area and thus ensure 
the security of the data recorded in the user area. 
[0033] Specifically, in response to a specific security 
setup command issued by the personal conputer 2 
connected to the storage device, the ODC 1 1 performs 

IS security processing for the conversion of DDS informa- 
tion, which are recorded in a predetermined area on a 
medium and in a predetermined form, into another form, 
or for recording the DDS information in another area. 
When the DDS information are converted into an 

20 another form from the pr^etermined form, to ensure 
security DDS information having a specific form are not 
copied to an another area on the medium. However, 
DDS information having the specific form may be copied 
to an another area. The specific form may be a format 

25 standard defined by the ISO, for example. 

[0034] When a medium whereon DDS information 
have been converted into an another form or have been 
moved and recorded in an another area is inserted into 
a storage device, the ODC 1 1 can not acquire the DDS 

30 information, and loading of the medium fails. However, if 
a process for restoring the original form from its current, 
converted form, or a process for reading DDS informa- 
tion to another area is performed, the DDS information 
can be effectively acquired. 

35 [0035] Fig. 4 is a flowchart for the security execution 
processing performed in the preferred embodiments of 
the present invention. In Rg. 4, when a medium loading 
process is started at step S1 1 the process for reading of 
DDS information. is performed (step S12). i.e., DDS 

40 information having a predetermined form which are 
recorded in the DDS area are read. When, as described 
above, the ODC 1 1 has not performed a security proc- 
ess for converting the DDS information into anotfier 
form, or for storing the DDS information in another area. 

45 the DDS information can be effectively read, and the 
medium loading process is successful (step SI 5). 
When the security process has been performed, a proc- 
ess for restoring DDS information, or a process for read- 
ing DDS information to an another area, which will be 

50 described later, is performed (step SI 3). If the DDS 
information have effectively been obtained, the loading 
of the medium is successful (step SI 5). When the DDS 
information can not be restored or the DDS information 
have been destroyed, the DDS information can not be 

55 obtained and the loading of the medium fails (step SI 6). 
When the loading of the medium is successful, an iden- 
tifier and address information, which will be described 
later, may be examined, and whether or not access has 
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been enabled may be checked. 
[0036] tn addition, in the preferred embodiments of the 
present invention, during the security processing an 
Identifier of a storage device is recorded in a predeter- 
mined area of a medium. Then, as is descrik>ed above. 5 
when the DOS information have been converted into 
another form, or have been moved and recorded in an 
another area, and the medium on which the identifier 
has been recorded is inserted into a specific storage 
device, the ODC 1 1 restores the DOS information hav- io 
ing a predetermined form, or reads the DDS information 
from the current area only when the identifier of the stor- 
age device matches the identifier recorded on the 
medium. As a result, accessing the user area is ena- 
bled, and the reading and the writing of data can be per- is 
formed. 

[0037] When the two identifiers do not match, the DDS 

information having a predetermined form can not be 
restored, and the current form of the data is not altered, 
so that the DDS information can not effectively be 20 
acquired. When, under the same condition, the DDS 
information have been moved to an another area, the 
DDS area is cleared and Initialized, so that the ODC 1 1 
can not read and effectively obtain the DDS information 
from the DDS area. Therefore, access of the user area 2s 
is inhibited. As described above, since a storage device 
that has an identifier differing from that written on the 
medium is prevented from reading and writing data rel- 
ative to the medium, the security of data is ensured. 
[0038] A more specific description of the preferred so 
embodiments of the present invention will now be given. 
Rgs. 5 and 6 are flowcharts for explaining a first embod- 
iment of the present invention. The flowcharts, which 
are explained below, are for the processing performed 
by the ODC 11. 35 
[0039] Fig. 5 Is a flowchart for the security setup 
processing performed according to the first embodiment 
of the present invention. In Fig. 5. at step SI 01 the ODC 
11 receives a security setup command, which will be 
described later, from the computer 2. which is a control 40 
apparatus. At step SI 02. upon the receipt of the secu- 
rity setup command, the ODC 11 converts into an 
another form DDS information which have a predeter- 
mined form and which are recorded in a DDS area in 
Fig. 3. As a result, the DDS information are rearranged 45 
as is described below. 

[0040] Fig. 7 is a diagram tor explaining an example 
rearrangement of DDS information. In Fig. 7, tiie DDS 
area is divided into segments of one byte each, and the 
individual segments are numbered. If, for example. DDS so 
Information are Chinese character data, such that one 
character consists of two bytes, the positions of the 
bytes in each byte pair In the DDS area are inverted, as 
is shown in Rg. 7. 

[0041 ] After the DDS irtformation recorded in a prede- 55 
termined form in a DDS area have been rearranged, the 
ODC 1 1 can not effectively acquire the DDS informatton 
when It attempts to read the data as rt was originally 
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recorded. 

[0042] Referring again to Rg. 5. at step SI 03 tiie rear- 
ranged DDS information are recorded in the DDS area, 
and at step Si 04. in addition to the rearrangement of 
the DDS information, the ODC 1 1 records the identifier 
of the storage device, into which the medium Is Inserted, 
and a security flag in a predetermined area on the 
medium. The identifier of the storage device is recorded 
in tiie flash ROM provided for the ODC 1 1 . The security 
flag is data indicating whether security data have been 
set. When the security flag is set ON, in accordance 
with the security setup command, the security data 
have been set. When the security flag is set to OFF. the 
security data have not been set. A predetermined area 
in which the security flag and the identifier are recorded 
may be at a location designated in the DDS area in 
advance, or at a location outside the DDS area. 
[0043] Fig. 6 is a flowchart showing the security exe- 
cution processing performed according to the first 
emtxxliment of ttie present Invention. In Rg. 6, at step 
S1 11. the medium is inserted into the storage device 
and a process for loading the medium Is started. Specif- 
ically, a process for enabling the reading and the writing 
of data is begun. 

[0044] At step S1 1 2, tiie data for the security flag are 
read from the predetermined area on tiie medium. 
When the security flag is OFF (no security setup 
effected), it is assumed that the above described data 
rean-angement in the DDS area has not been per- 
formed, and the DDS information can be effectively 
acquired. Therefore, accessing the user area Is possi- 
ble, and the loading of the medium is successful (step 
S1 13). In other words, the reading and the writing of 
data are possible. 

[0045] When, at step Si 12, the security flag is ON 
(security setup effected), at step S114 the Identifier 
recorded on the medium is compared with the Identifier 
of the storage device into which the medium has been 
inserted. When the two identifiers match, DDS informa- 
tion having a predetermined form can t>e restored 
before being read (step S1 15). The DDS information 
can be normally acquired, so tiiat the loading of the 
medium is successful (step S1 16). If, at step S1 14. the 
two identifiers do not match, the DDS information hav- 
ing a predetermined form can not be restored before 
reading, and the DDS information .which have been 
rearranged in an another form are read. Thus, the DDS 
information can not k>e effectively acquired, and the 
loading of the medium fails (step S1 17). In other words, 
the reading and the writing of data are disabled. 
[0046] When a medium is inserted Into a storage 
device which does not support the security setup com- 
mand, the examination of the security flag and the com- 
parison of the iderniflers are not performed, and the 
reading of DDS information is started. However, since 
the DDS Information have been rearranged in an 
another form, the DDS Information can not be effectively 
otJtained, and the loading of the medium fails. 
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[0047] In the first embodiment, when the security 
setup command is transmitted by the control apparatus, 
the identifier of the storage device and the security flag 
are recorded in a predetermined area on the medium. 
When the medium is inserted into a storage device and 5 
the identifier of the storage device does not match the 
identifier recorded on the medium, the DDS information 
having a predetermined form can not be restored to 
their original form, and the DDS information can not be 
effectively acquired. Therefore, the user area can not be 10 
accessed and the reading and the writing of data are 
disabled, so that the secrecy and the security of data 
are thereby ensured. 

[0048] Figs. 8 and 9 are flowcharts for explaining a 
second embodiment of the present invention. Rg. 8 is a is 
flowchart showing the security setup processing per- 
formed according to the second embodiment. In fig. 8. 
at step S201 the ODC 1 1 receives a security setup com- 
mand from the computer 2, which is a control appara- 
tus. At step S202, upon the receipt of the security setup 20 
command, the ODC 11 reads the DDS information 
recorded in the DDS area in Fig. 3. At step S203. the 
ODC 1 1 moves the DDS information to another area. 
For example, the DDS information may be moved to a 
replacement area shown in Fig. 3. In other words, the 2S 
DDS information are recorded in the replacement area 
and the DDS information in the DDS area are deleted. 
[0049] At Step S204. as well as in the first embodi- 
ment, in addition to the moving of the DDS information, 
the ODC 11 records in a predetermined area on the 30 
medium the identifier of the storage device into which 
the medium is inserted and the security flag. 
[0050] Fig. 9 is a flowchart showing the security exe- 
cution processing performed according to the second 
embodiment of the present invention. In Fig. 9, at step 35 
S211 the medium is inserted into the storage device 
and a process for loading the medium is started. Specif- 
ically, a process for enabling the reading and the writing 
of data is begun. 

[0051 ] At st^ S21 2. data for the security flag are read 40 
from the predetermined area on the medium. When the 
security flag is OFF (no security setup effected), it is 
assumed that the above described movement from the 
DDS area has not been performed, and the DDS infor- 
mation can be effectively acquired. Tlierefbre, access- 45 
ing the user area is possible, so that the loading of the 
medium is successful (step S213). In other words, the 
reading and the writing of data are possible. 
[0052] When, at step S212. the security flag is ON 
(security setup effected), at step S214 the identifier so 
recorded on the medium is corhpared with the identifier 
of the storage device into wtiich the medium has been 
inserted. When the two identifiers match, the ODC 1 1 
assumes that the DDS information are recorded in the 
replacement area, and reads the DDS information from ss 
the replacement area (step S215). The DDS information 
are normally acquired, and the loading of the medium is 
successful (step 8216). If. at step S214, the two identifi- 



ers do not match, the ODC 1 1 assumes that the DDS 
information are recorded in the DDS area, and tries to 
read the DDS information from the DDS area (step 
S217). However, as is descrit>ed above, since the DDS 
information in the DDS area have been deleted, the 
ODC 1 1 can not acquire the data and the loading of the 
medium fails (step S218). In other words, the reading 
and the writing of data are disatsled. 
[0053] When a medium is inserted into a storage 
device for which the security setup command is not sup- 
ported, the examination of the security flag and the 
comparison of the identifiers are not performed, and the 
reading of DDS information is started. However, since 
the DDS information have been deleted from the DDS 
area, the DDS information can not be effectively 
obtained and the loading of the medium fails. 
[0054] In the second embodiment, when the security 
setup command is transmitted by the control apparatus, 
the identifier of the storage device and the security flag 
are recorded in a predetermined area on the medium. 
When the medium is inserted into a storage device and 
the iderttif ier of the storage device does not match the 
identifier recorded on the medium, the device attempts 
to read the DDS information from the DDS area wherein 
the DDS information were deleted, but the DDS infor- 
mation can not be effectively acquired. Therefore, the 
user area can not be accessed and the reading and the 
writing of data are disat^ed. so that the secrecy and the 
security of data are thereby ensured. 
[0055] Figs. 10 and 1 1 are flowcharts for explaining a 
third embodiment of the present invention. Fig. 10 is a 
ffowchart showing the security setup processing per- 
formed according to the third embodiment. In fig. 10, at 
step S301 the ODC 1 1 receives a security setup com- 
mand, which will be described later, from the computer 
2. which is a control apparatus. At step S302. upon the 
receipt of the security setup command, the ODC 11 
shifts the DDS information recorded in the DDS area in 
Fig. 3 by at least one bit. 

[0056] Rg. 12 is a diagram for explaining an example 
shift of the DDS information. As is shown in Fig. 12. the 
DDS information of 8 bits are shifted by one bit in the 
DDS area, the last bit (08) being moved to the first bit 
position. In other words, bit rotation is performed. When 
DDS information having a predetermined form which 
are recorded in the DDS area are shifted, tiie ODC 11 
can not effectively acquire the DDS information when it 
attempts to read the data as it was originally recorded. 
[0057] At step S303, tiie shifted DDS information are 
recorded in the DDS area. At step S304, as well as in 
the first emksodiment, in addition to shifting of the DDS 
information, the ODC 1 1 records the identifier of the 
storage device into which the medium has been 
ins^ed and the security flag in a predetermined area 
on the medium. 

[0058] Fig. 1 1 is a flowchart showing the security exe- 
cution processing performed according to the third 
emk>odinnent of the present inventioa In Rg. 1 1 , at step 
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S311 the medium is inserted into the storage device 
and a process for loading the medium is started. Specif- 
ically, a process for enabling the reading and the writing 
of data is begun. 

[0059] At step S3 1 2. data for the security flag are read 
from the predetermined area on the medium. When the 
security flag Is OFF (no security setup effected). It Is 
assumed that the above descnlDed shifting of the DDS 
information in the DDS area has not been performed, 
and the DDS information are effectively acquired. 
Therefore, accessing the user area is possible, so that 
the loading of the medium is successful (step S313). in 
other words, the reading and the writing of data are pos- 
sible. 

[0060] When, at step S3 12. the security flag is ON 
(security setup effected), at step S3 14 the identifier 
recorded on the medium Is compared with the Identifier 
of the storage device Into which the medium is inserted. 
When the two identifiers match, the DDS informatfon 
are restored to their original form before being read 
(step S315). The DDS information are normally 
acquired, and the loading of the medium Is successful 
(step S316). If. at step S314. the two identifiers do not 
match, the DDS information are not restored to their 
original form, and the DDS information which have been 
shifted are read. As a result the ODC 11 can rK>t 
acquire the DDS information and the loading of the 
medium foils (step S317). In other words, the reading 
and the writing of data are disat)fed. 
[0061] When a medium is inserted into a storage 
device for which the security setup command is not sup- 
ported, the examination of the security flag and the 
comparison of the Identifiers are not performed, and the 
reading of the DDS information is started. However, 
since the DDS information have been shifted in the DDS 
area, the DDS information can not be effectively 
obtained and the loading of the medium fails. 
[0062] In the third emk>odiment. when the security 
setup command is transmitted by the control apparatus, 
the identifier of the storage device and the security flag 
are recorded in a predetermined area on the medium. 
When the medium is Inserted into a storage device and 
the identifier of the storage device does not match the 
identifier recorded on the medium, the DDS infonmation 
that have been shifted are not restored to their original 
form and the DDS information can not be effectively 
acquired. Therefore, the user area can not be accessed 
and the reading and the writing of data are disabled, so 
that the secrecy and the security of the data are thereby 
ensured. 

[0063] Rgs. 13 and 14 are flowcharts for explaining a 
fourth embodiment of the present Invention. Rg. 13 is a 
flowchart showing the security setup processing per- 
formed according to the fourth embodiment, in Rg. 13. 
at step S401 the ODC 1 1 receives a security setup com- 
mand from the computer 2, which is a control appara- 
tus. At step S402, upon the receipt of the security setup 
command, the ODC 1 1 encodes the DDS Information 



recorded in the DDS area in Rg. 3. For example, the 
encoding in performed by ciphenring. The encoding of 
data is performed by using, for example, predetermined 
encode/decode, or cipher/decipher software provided 

5 for the ODC 11. 

[0064] At ^ep S403. the encoded DDS information 
are recorded In the DDS area. At step S404. as well as 
In the first emt)odiment. in addition to encoding the DDS 
information, the ODC 11 records the identifier of the 

10 storage device into which the medium is inserted and 
the security flag in a predetermined area on the 
medium. 

[0065] Fig. 1 4 is a flowchart showing the security exe- 
cution processing performed according to tine fourth 

15 embodiment of the present invention. In Rg. 14. at step 
S411 the medium is inserted into the storage device 
and a process for loading the medium is started. Specif- 
ically, a process for enabling the reading and the writing 
of data is begun. 

20 [0066] At step S41 2. data for the security flag are read 
from the predetermined area on the medium. When the 
security flag is OFF (no security setup effected), it is 
assumed that the above described shifting of the DDS 
information In the DDS area has not bean performed, 

25 and the DDS information are effectively acquired. 
Therefore, accessing the user area is possible, and tiie 
loading of the medium is successful (step S413). In 
other words, the reading and the writing of data are pos- 
sible. 

30 [0067] When, at step S412. the security flag is ON 
(security setup effected), at step S414 the identifier 
recorded on the medium is compared with the identifier 
of the storage device into which the medium is inserted. 
When the two identifiers match, before being read, the 

35 DDS information are decoded by the predetermined 
encode/decode software provided for the ODC 1 1 . and 
the DDS information are restored to their original form 
(step S415). Thus, the DDS information are normally 
acquired, and the loading of the medium is successful 

40 (st^ S416). If. at step S414. tiie two identifiers do not 
match, the DDS information are read without being 
decoded. As a resuft. the ODC 1 1 can not acquire the 
DDS information and the loading of the medium fails 
(st^ S417). In other words, the reading and the writing 

45 of data are disabled. 

[0068] When a medium is inserted into a storage 
device for which the security setup command Is not sup- 
ported, the examination of the security flag and the 
comparison of the identifiers are not performed, and the 

50 reading of DDS information is started. However, since 
the DDS information have been encoded, the DDS 
information can not be effectively otJtained and the load- 
ing of the medium fails. 

[0069] In the fourth embodiment, when the security 
55 setup command Is transmitted by tiie control apparatus, 
the identifier of the storage device and the security flag 
are recorded In a predetermined area on the medium. 
When the medium Is inserted into a storage device and 
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the identifier of the storage device does not match the 
identifier recorded on the medium, the ODS information 
are read without being decoded, and the DDS informa- 
tion can not be effectively acquired. Therefore, the user 
area can not be accessed, the reading and writing of 5 
data is disabled, and the secrecy and the security of 
data are thereby ensured. 

[0070] Fig. 15 is a diagram showing an example CDB 
(Command Desaiptor Block) for a security setup com- 
mand which is transmitted by the personal computer 2 10 
to the storage device 1 . The security setup command in 
Fig. 15 is prepared by using a vender unique command 
for the SCSI irrterface. As is described above, the secu- 
rity setup data, according to which memory medium 
access is permitted only when the identifier recorded on is 
a memory medium matches the identifier of a storage 
device, are set to the security level established by the 
security setup command. 

[0071] The security level may be designated in 
accordance with a normal format command, instead of 20 
the security setup command t^ing set by using the 
vender unique command. Fig. 16 is a diagram showing 
an example CDB for a format command for which the 
security le^el is set by using the SCSI command. 
[0072] In the individual emtxxjiments, the security is 2S 
released when the identifier recorded on the medium 
matches the identifier of the storage device into which 
the medium is inserted. To enhance the secrecy of data, 
a security function for restricting the reading and the 
writing of data may be additionally provided. 30 
[0073] Thus, read address information and write 
address information are recorded in the parameter head 
of a parameter, which is designated by the security 
setup command (Fig. 15) or the format command (Fig. 
. 1 6) for which the security level has been set. 35 
[0074] Rgs. 17A and 17B are diagrams showing an 
example structure for a parameter designated by the 
above commands. The parameter is constituted by a 
parameter head, shown in Fig. 17A, and a level descrip- 
tor, shown in Rg. 1 7B. The read and write address infor- 40 
mation are written in the parameter head in Fig. 17A. 
The read address information and the write address 
information are recorded in a predetermined area, in 
addition to the security address information which is 
recorded during the security setup process performed 45 
in the above embodiments. 

[0075] The level descriptor in Fig. 17B consists of a 
header of two bytes and a succeeding parameter field. 
The parameter field is divided into units called pages, in 
which are recorded individual function attributes. The so 
password is recorded in the level descriptor in the 
parameter. 

[007(5] Fig. 1 8A is a diagram showing a page for pass- 
words in the parameter field (see Fig. 17B) of the level 
descriptor. The password is written in the security area ss 
together with the read and write address information. 
Fig. 188 is a diagram in which pages, shown in the 
parameter field of the level descriptor, are designated 



for the recording of a logical block addresses (LB As), 
which will be descn'bed later. 

[0077] When, for example, the read address informa- 
tion have not been set. the reading of data is permitted. 
But when the read address information have been set. 
the reading of data is inhibited even though the identifi- 
ers match. However, if a predetermined password from 
the computer 2 is input at this time, the reading of data 
is permitted. 

[0078] And when, for example, the write address infor- 
mation have not been set, the writing of data is permit- 
ted. But when the write address information have been 
set, the writing of data is inhibited even though the iden- 
tifiers match. However, if a predetermined password 
from the computer 2 is input ai this time, the writing of 
data is permitted. 

[0079] Furtiier. in the above embodiments, all the data 
recorded on the medium are objects for which the set- 
ting of security is performed. \Nhen a plurality of data 
sets are recorded on the medium, however, the setting 
of security is desired for only a part of those data. 
[0080] Therefore, to set the security for the medium, a 
logical block address (LBA) for selected data is desig- 
nated in the level descriptor of the parameter in Rg. 15. 
More spedficalty, a LBA designation page for designat- 
ing data for which security is to be set is entered in a 
parameter field of the level descriptor (see Rg. 18B). 
The LBA is an address for a predetermined unit of data 
recorded in the user area in Fig. 3. As is shown in Fig. 
18B, for setting security a data LBA (security LBA) hav- 
ing a length of three bytes, for example, is designated. 
The data for the security LBA are recorded in a prede- 
termined area at the same time as the identifier of the 
storage device is recorded therein. 
[0081] As a result, even when the identifiers match 
and the security is released, only the reading and writ- 
ing of data that correspond to tfie LBA entered in the 
LBA designation page is permitted. In addition, even 
when the read address information or the write address 
information have been set and reading or writing is per- 
mitted, only the reading and writing of data that corre- 
spond to the LBA entered in the LBA designation page 
is permitted. 

[0082] A storage device, such as a DVD player, which 
incorporates a processor serving as a host computer, 
can perform the above security process internally. 
[0083] As is descrit>ed above, according to the 
present invention, the form of DDS information recorded 
on a medium may be altered in response to a security 
setup command, wtiich is transmitted by a control appa- 
ratus (personal computer) to control a data storage 
device. Then, when the medium is inserted into a stor- 
age device arKi the Identifier of the storage device does 
not match the identifier recorded on the medium, the 
reading of the DDS information in its altered form is 
started, so that the DDS information can not be effec- 
tively obtained. Therefore, the user area can not be 
accessed and the reading and the writing of data are 
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disabled. And in the event the medium was stolen, the 
secrecy and the security of data recorded on the 
medium are ensured. 

[0084] The present invention may be embodied in 
other specific forms without departing from the spirit or 5 
essential characteristics thereof. The present emix)di' 
ment is therefore to be considered in all respects as 
illustrative and not restrictive, the scope of the invention 
being indicated by the appended claims rather than by 
foregoing description and all change which come within io 
the meaning and range of equivalency of the claims are 
therefore intended to be embraced therein. 

Claims 

IS 

1 . A data storage device for reading data from and/or 
writing data to a memory medium, comprising: 

an acquisition unit for acquiring management 
information which is recorded by a predeter- 2o 
mined form in saki memory: and 
a controlter for converting said management 
information which is recorded by a predeter- 
mined form in said memory medium into an 
another form. 25 

2. The data storage device according to daim 1, 
wherein said controller rearranges said manage- 
ment information to convert said rnanagement 
information into said another form. 30 

3. The data storage device according to daim 1, 
wherein said controller shifts said management 
information by at least one bit to convert said man- 
agement information into said another form. 3S 

4. The data storage device according to dairh 1, 
wherein said controller encodes said management 
information to convert said management informa- 
tion into said another form. 40 

5. The data storage device according to daim 1, 



6. The data storage device according to daim 5, so 



7. The data storage device according to daim 5, 

wherein read access control information for 
controlling a read access to Sciid data is 
recorded on said memory medium; and 
said contrdler permits or inhibits reading of 
said data according to said read address infor- 
mation and r^ati'onship between said first iden- 
tifier and said second identifier. 

8. The data storage device according to daim 5. 

wherein read access control information said 
data and access control information which des- 
ignates at least one of a plurality of said data 
are recorded on said memory medium; and 
said controller permits or inhit»ts reading of 
said designated data according to said read 
address information and relationship t>etween 
said first identifier and said second identifier. 

9. The data storage device according to claim 5, 

wherein read access control information said data 
and a first password are recorded on said memory 
medium: 

said controller permits or inhibits reading of 
said data according to said read address infor- 
mation, relationship between said first pass- 
word and an inputted second password and 
relationship between said first identifier and 
said second identifier. 

1 0. The data storage device according to daim 5. 

wherein write access control information for 
controlling a write access to said data is 
recorded on said memory medium; and 
said controller permits or inhibits writing of said 
data according to said write address informa- 
tion and relationship between said first identi- 
fier and said second identifier. 

11. The data storage device according to daim 5. 

wherein write access control inforrriation for 
controlling a write access to said data and 
access control information which designates at 
least one of a plurality of said data ai^e recorded 
on said memory medium: and 
said controller permits or inhibits writing of said 
designated data according to said wr'rte 
address information and relationship t>etween 
said first identifier and said second identifier. 

12. The data storage device according to daim 5, 
wherein write access control information for control- 
ling write access to said data and a first password 



wherein access control information for control- 
ling an access to at least one of a plurality of 
said data is recorded on said memory; and 
said controller permits or inhabits accessing of ss 
said designated data according to relationship 
between said first identifier and said second 
identifier. 



The data storage device according to daim 1, 
wherein said controller restores said converted 
management information to said predetermined 
form according to a relationship between a first 4S 
identifier recorded on said memory medium and a 
second identifier recorded in said data storage 
device. 
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are recorded on said memory medium; 

said controller permits or inhibits writing of said 
data according to said write access control 
irtformation. relationship between said first s 
password and an inputted second password 
and relationship between said first identifier 
and said second identifier. 

1 3. The data storage device according to claim 5, io 

wherein each said first and said second Identi- 
fiers is a serial number for said data storage 
device. 

75 

14. The data storage device according to dalm 1 , 

wherein said memory medium is a disk which 
is removable from said data storage device: 

20 

15. The data storage device according to claim 14, 

wherein said disk is a magneto-optical disk; 
and 

said predetermined area Is a disk definition 2S 
sector (DDS) area in which management Infor- 
mation for said memory medium is recorded. 

1 6. A data storage device which reads data from and/or 
writes data to a memory medium, comprising: 30 

an acquisition unit for acquiring management 
information which is recorded on a predeter- 
mined area of said memory; and 
a controller for moving said management Infor- 35 
mation to an another area. 

17. The data storage device according to daim 16, 
wherein said acquisition unit acquires said moved 
management information from said another area 40 
according to a relationship between a first identifier 
recorded on said memory medium and a second 
Identifier recorded in said data storage device 

18. A method for controlling a data storage device 45 
which reads data from and/or writes data to a mem- 
ory medium, comprising the steps of: 

acquiring management information which is 
recorded by a predetermined form in said so 
memory; and 

converting said management information of 
said memory medium into an another form. 

19. The method for controlling a data storage device ss 
according to daim 18, wherein, at said converting 
step, said management information is rearranged to 
convert said management information into said 



another form. 

20. The method for controlling a data storage device 
according to daim 18. wherein, at said converting 
step, said management information is shifted by at 
least one bit to convert said management informa- 
tion into said anotiier form. 

21. The method for controlling a data storage device 
according to daim 18, wherein, at said converting 
step, said management information is encoded to 
convert Said management Information into said 
another form. 

22. The method for controlling a data storage device 
according to daim 18. further comprising the steps 
of: 

restoring said converted management informa- 
tion to said predetermined form according to a 
relationship between a first identifier recorded 
on said memory medium and a second identi- 
fier recorded in said data storage device; and 
acquiring said restored management informa- 
tion. 

23. A corrtrd method for a data storage device which 
reads data from and/or writes data to a memory 
medium, comprising the steps of: 

acquiring management information which is 
recorded on a predetermined area of said 
memory; and 

moving said management information of said 
memory medium to another area in said mem- 
ory medium. 

24. The method for controlling a data storage device 
according to daim 23, further comprising the step 
of: 

acquiring said moved management information 
from said another area according to a relation- 
ship between a first identifier recorded on said 
memory medium and a second identifier 
recorded in said data storage device. 



10 



EP 0 930 615 A2 




EP 0 930 615 A2 
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FIG. 16 
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FIG. 17A 
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FIG. 18A 
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FIG. 19 
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(54) Data storage device and control method therfor 

(57) It is provided a data storage device which reads 
data from and/or writes data to a memory medium, 
comprising: an acquisition unit for acquiring manage- 
ment information which is recorded by a predetermined 
form in said memory; and a controller for converting the 
management Information into an another form. The con- 
troller rearranges the management information to con- 
vert the management information into another form, and 
also the controller restores the converted management 
information to the predetermined form according to a 
relationship between a first Identifier recorded on the 
memory medium and a second identifier recorded In the 
data storage device. When, for example, the two identi- 
fiers match, the acquisition unit can acquire the man- 
agement information, and the reading and writing of 
data is enabled. When the two identifiers do not match, 
restoration of the management information to a prede- 
termined form is not effected, so that the acquisition unit 
can not acquire the management information and the 
reading and writing of data is disabled. 
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